AMENDMENTS TO THE CLAIMS: 



This listing of claims will replace all prior versions and listings of claims in the 
application. 

LISTING OF CLAIMS 

1-15. (canceled) 

16. (Previously Presented) A method, including steps of 

at a first node in a network, distributing digital content to a second node in that 
network, that digital content representing at least a portion of a media stream, at least a 
portion of that digital content being encrypted by a first encryption key those steps of 
distributing to a second node including steps of 

(a) receiving a first decryption key, that first decryption key being encrypted by a 
second encryption key, that second encryption key being pre-assigned to that first node; 

(b) decrypting that first decryption key using a second decryption key associated 
with that second encryption key, that second decryption key being preassigned to that 
first node; 

(c) decrypting that digital content using that first decryption key; 

(d) re-encrypting at least a portion of that digital content using a re-encryption 

key. 

17. (Previously Presented) A method as in claim 16, including steps of 
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by a user of that digital content, receiving a decryption key associated with that 
re-encryption key. 

18. (Previously Presented) A method as in claim 16, including steps of 

receiving at least one of (a) that re-encryption key, (b) a decryption key associated 
with that re-encryption key, at a server having access to that first decryption key. 

19. (Previously Presented) A method as in claim 16, including steps of 
receiving that re-encryption key from a server having access to that first 

decryption key. 

20. (Previously Presented) A method as in claim 16, wherein 

at least one pair of: that first encryption key and that first decryption key, that 
second encryption key and that second decryption key, that re-encryption key and a 
decryption key associated with that re-encryption key, 

include associated keys in a public-key cryptosystem. 

21. (Previously Presented) A method as in claim 16, wherein 

at least one pair of: that first encryption key and that first decryption key, that 
second encryption key and that second decryption key, that re-encryption key and a 
decryption key associated with that re-encryption key, 

include associated keys in a symmetric-key cryptosystem. 
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22. (Currently Amended) A method as in claim 16, wherein 

that second node includes one or more of: 

a node in that network capable of performing those steps of distributing that 
digital content, 

a recipient user, 

a presentation device. 

23. (Previously Presented) A method as in claim 16, wherein that re-encryption key is 
responsive to information from that first node. 

24. (Previously Presented) A method as in claim 16, including steps of renewing or re- 
voking a license associated with that media stream. 

25. (Previously Presented) A method as in claim 16, wherein 

at least one of: (a) that first decryption key, (b) a decryption key associated with 
that re-encryption key 

is associated with a set of restrictions on a license to that digital content. 

26. (Previously Presented) A method as in claim 25, wherein 

those licensing restrictions include at least one of: 

a first date or time at which presentation is allowed for that media stream; 
a last date or time at which presentation is allowed for that media stream; 
a limited number of presentations allowed for that media stream; 
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a limited physical region at which presentation is allowed for that media stream; 
a charge, cost, fee, or subscription associated with allowing presentation of that 
media stream; 

a type of presentation device; 

an output format for a presentation device; 

a set of specific presentation devices; 

a bit rate, sampling rate, or other measure of granularity or precision for a 
presentation device. 

27. (Previously Presented) A method as in claim 16, wherein 

a decryption key associated with that re-encryption key is pre-assigned to at least 

one of: 

that second node, 

a user of that digital content, 

a presentation device associated with a user of that digital content. 

28. (Previously Presented) A method as in claim 16, wherein steps of distributing 
digital content to 

at least one of: (a) that first node, (b) that second node, (c) a user node include 
reading at least a portion of that digital content from physical media. 

29. (Previously Presented) A method as in claim 16, wherein 

that digital content includes at least one of: 
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metadata about that media stream; 

some information capable of inspection by a user other than for presentation of 
that media stream. 

30. (Previously Presented) A method as in claim 16, including steps of 

delivering, to a user of that digital content, that digital content in a form being 
locked against inspection or tampering by that user; 

separately delivering, to that user, a license including a content key capable of 
unlocking that digital content, that content key being locked against inspection or 
tampering by devices other than a selected presentation device owned by that user; 
wherein the selected presentation device is associated with a presentation device key, a 
secure portion of the presentation device being capable of unlocking that license using 
that presentation device key; 

with the effect that presentation of that digital content is restricted to that selected 
presentation device. 

3 1 . (Previously Presented) A method as in claim 1 6, including steps of, at a license 
server 

receiving an indication of distribution of that digital content; 
initiating delivery of that first decryption key to that first node; 
separately initiating delivery of a license for that digital content, that license 
including a content key capable of unlocking that digital content; 

wherein that license is delivered in time to at least one of (a) a user of that digital content, 
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(b) a device for presenting that digital content, or (c) a node in that network. 

32. (Currently Amended) Apparatus including 

a physical medium maintaining digital content representing at least a portion of a 
media stream, at least a portion of that digital content being encrypted by a first 
encryption key; 

a physical medium maintaining a first decryption key, that first decryption key 
being encrypted by a second encryption key, that second encryption key being pre- 
assigned to that apparatus; 

a key decryption element coupled to associated with that first decryption key, that 
key decrypting element having access to a second decryption key associated with that 
second encryption key, that second decryption key being pre-assigned to that apparatus; 

a content decryption element coupled to for decrypting that digital content and 
with reference to that first decryption key; 

a content re-encryption element couplod to for re-encrypting at least a portion of 
that digital content and with reference to a re-encryption key. 

33. (Currently Amended) Apparatus as in claim 32, including 

an output port couple - able - coupled to a network; 

a sending element coupled to that output port and being disposed to send , to an 
intended user of that digital content, information from which that intended user can 
concerning use [of] a decryption key associated with that re-encryption key. 
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34. (Currently Amended) Apparatus as in claim 32, including 

an output port coupleable coupled to a network; 

a sending element coupled to (a) that output port, (b) a physical medium 
maintaining a message directed to a server associated with that digital content or with 
rights to that digital content, and (c) information from which that intended server can 
grant access to a decryption key associated with that re-encryption key. 

35. (Currently Amended) Apparatus as in claim 32, including 

an input port coupleable coupled to a network; 

a receiving element coupled to that input port and being disposed to receive that 
re-encryption key from a device having access to that first decryption key. 

36. (Previously Presented) Apparatus as in claim 32, wherein 

at least one pair of: that first encryption key and that first decryption key, that 
second encryption key and that second decryption key, that re-encryption key and a 
decryption key associated with that re-encryption key, 

include associated keys in a public-key cryptosystem. 

37. (Previously Presented) Apparatus as in claim 32, wherein 

at least one pair of: that first encryption key and that first decryption key, that 
second encryption key and that second decryption key, that re-encryption key and a 
decryption key associated with that re-encryption key, 

include associated keys in a symmetric-key cryptosystem. 
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38. (Currently Amended) Apparatus as in claim 32, including 

an output port coupleable coupled to a network; 

a sending element coupled to (a) that output port, (b) that content re-encryption 
element, and (c) a physical medium maintaining a message directed to one or more of 
a node in that network capable of distributing that digital content, a recipient user, 
a presentation device. 

39. (Previously Presented) Apparatus as in claim 32, wherein that re-encryption key is 
responsive to information from that apparatus. 

40. (Previously Presented) Apparatus as in claim 32, wherein 

at least one of: (a) that first decryption key, (b) a decryption key associated with 
that re-encryption key 

is associated with a set of restrictions on a license to that digital content. 

41. (Previously Presented) Apparatus as in claim 40, wherein 

those licensing restrictions include at least one of: 

a first date or time at which presentation is allowed for that media stream; 

a last date or time at which presentation is allowed for that media stream; 

a limited number of presentations allowed for that media stream; 

a limited physical region at which presentation is allowed for that media stream; 

a charge, cost, fee, or subscription associated with allowing presentation of that 
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media stream; 

a type of presentation device; 

an output format for a presentation device; 

a set of specific presentation devices; 

a bit rate, sampling rate, or other measure of granularity or precision for a 
presentation device. 

42. (Previously Presented) Apparatus as in claim 32, wherein 

a decryption key associated with that re -encryption key is pre-assigned to at least 

one of: 

that second node, 

a user of that digital content, 

a presentation device associated with a user of that digital content. 

43. (Canceled.) 

44. (Previously Presented) Apparatus as in claim 32, wherein 

that digital content includes at least one of: 
metadata about that media stream; 

some information capable of inspection by a user other than for presentation of 
that media stream. 

45. (Currently Amended) Apparatus as in claim 32, including 
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an output port coupleable coupled to a network to which a user of that digital 
content is coupled; 

a software element coupled to (a) that output port, (b) that content re-encryption 
element, and (c) a physical medium maintaining a message to that user; wherein 
that user is capable of separately retrieving from a device coupled to that network, a 
license including information granting access to a decryption key associated with that re- 
encryption key; 

that license is associated with a selected presentation device owned by that user; 

the selected presentation device is associated with a presentation device key, a 
secure portion of the presentation device being capable of unlocking that license using 
that presentation device key; 

with the effect that presentation of that digital content is restricted to that selected 
presentation device. 

46. (Currently Amended) Apparatus as in claim 32, including 
an input port couple - able - coupled to a network; 

a receiving element coupled to that input port, being disposed to receive an 
indication of distribution of that digital content, and being disposed to receive that first 
decryption key; 

an output port couploablo coupled to that network; 

a sending element coupled to (a) that output port, (b) a physical medium 
maintaining a first message, that first message including information sufficient to access 
that decryption key associated with that re-encryption key, and (c) a physical medium 
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maintaining a second message, that second message including information sufficient to 
access a license for that digital content, that license including a content key capable of 
unlocking that digital content; 

wherein that license is delivered in time to at least one of: a user of that digital 
content, a device for presenting that digital content, or a node in that network. 

47. (Currently Amended) Apparatus including 

an input port coupleable coupled to a network; 

a receiving element coupled to that input port, being disposed to receive an 
indication of distribution of digital content representing at least a portion of a media 
stream, at least a portion of that digital content being encrypted; 

an output port coupl e able coupled to that network; 
a sending element coupled to (a) that output port, (b) a physical medium maintaining a 
message including information sufficient to decrypt that digital content, (c) a physical 
medium maintaining a message including information sufficient to re-encrypt that digital 
content, and (d) a physical medium maintaining a separate message including information 
sufficient to access a license for that digital content, that license including a content key 
capable of unlocking that digital content; 

wherein that license is delivered in time to at least one of: a user of that digital 
content, a device for presenting that digital content, or a node in that network. 

48. (Currently Amended) A physical medium maintaining instructions intorprotablo by a 
computing device at a first node in a network, those instructions being disposed to direct 
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that computing device to distribute computer-readable medium having computer- 
executable instructions for performing a method of distributing digital content from a first 
node in a network to a second node in that network, that digital content representing at 
least a portion of a media stream, at least a portion of that digital content being encrypted 
by a first encryption key|Y| , comprising: 

those instructions to distribute including instructions disposed to direct that 
computing device to 

(a) receive receiving a first decryption key, that first decryption key being 
encrypted by a second encryption key, that second encryption key being pre-assigned to 
that first node; 

(b) decrypt that decrypting said first decryption key using a second decryption key 
associated with that second encryption key, that second decryption key being pre- 
assigned to that first node; 

(c) decrypt that decrypting said digital content using that first decryption key; 

(d) ro encrypt re-encrypting at least a portion of that digital content using a re- 
encryption key. 
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